CVE-2006-3778

IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the (1) "Save As Draft" option is used or…

published July 21, 2006

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the (1) "Save As Draft" option is used or (2) a "," (comma) is inside the "phrase" portion of an address, which can cause the e-mail to be sent to users that were deleted from the To, CC, and BCC fields, which allows remote attackers to obtain the list of original recipients.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01512 · 74.3th percentile
Published
2006-07-21T18:00Z
EPSS history
Timeline
  • 21 JUL 18:00Z
    IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the (1) "Save As Draft" option is used or…
    cvelistv5